Privacy Policy
This document explains how we collect, use, and protect your personal data.
Table of Contents
1. Introduction
This document explains how Difilm Shortlink (operated by PT Difilm Digital Indonesia) collects, uses, stores, and protects your personal data when you use our monetized shortlink service at https://earnlinkfly.my.id.
By using our service, you agree to the practices described in this Privacy Policy. If you do not agree, please stop using the service.
2. Data Controller
- Legal entity: PT Difilm Digital Indonesia
- Address: Jl. Sudirman No. 123, Jakarta Pusat 10220, Indonesia
- General email: support@difilm.site
- Privacy email: privacy@difilm.site
- Phone: +62 21 1234 5678
- Support hours: Senin–Jumat 09:00–18:00 WIB
3. Data We Collect
We may collect:
- Account data: email, display name, password hash, API key, referral code
- Technical data: IP address, user agent, device, browser, referrer, UTM, country (geo)
- Transaction data: click history, earnings, withdrawals, WijayaPay ref IDs
- Payment data: processed by third-party gateways; we do not store full card numbers
- Communication data: contact form messages, support tickets
- Cookies & local storage: login session, theme preference, cookie consent
4. Processing Purposes
- Provide and operate the shortlink service
- Authentication, security, anti-fraud, rate limiting
- Publisher and admin analytics (clicks, country, device)
- CPM calculation, balance, referral, and withdrawals
- Process visitor payments via WijayaPay
- Display ads (Google AdSense, Adsterra) when enabled
- Comply with legal obligations
- Service communications (transactional email, support)
5. Legal Basis
- Consent — non-essential ad cookies
- Contract — publisher account, shortlink service, withdrawals
- Legitimate interest — security, anti-bot, aggregate analytics
- Legal obligation — transaction record retention
6. Third Parties
We may share limited data with WijayaPay, ad networks, hosting/CDN providers, and geo IP services. We do not sell your personal data for third-party marketing.
7. Data Retention
- Account data: while active + 12 months after deletion
- Click logs & analytics: 24 months
- Transactions/withdrawals: 5 years
- Security logs: 12 months
8. Your Rights
You may request access, correction, deletion (subject to retention), and withdraw non-essential cookie consent. Contact privacy@difilm.site. We respond within 14 business days.
9. Data Security
We use HTTPS, bcrypt password hashing, CSRF protection, rate limiting, httponly sessions, and security logging.
10. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect data from children.
11. International Transfers
Data may be processed on servers in Indonesia or our hosting provider's region with reasonable safeguards.
12. Policy Changes
We may update this policy. Material changes will be notified via email or site banner.
13. Contact
Privacy questions: privacy@difilm.site · Contact Form